VAST was a Linux-based security distribution specifically designed for penetration testing VoIP and UC networks. It enables security professionals and UC administrators to rapidly perform VoIP security assessments and enumerate vulnerabilities in IP Phones or IP PBX servers in a lab environment. With VAST, a security consultant has every tool necessary to carry out a successful on-site or remote penetration test or vulnerability assessment against a UC network. VAST was built on Linux Mint and includes all of the open source VIPER Lab tools, in addition to some other network penetration testing tools.

OPNsense is a FreeBSD-based specialist operating system designed for firewalls and routers. The project has published a new development snapshot, OPNsense 18.7 RC1, for testing. The new snapshot includes new Intel network driver improvements and better IPv6 support. "The main goal for 18.7 is stability so we have not yet begun to adopt FreeBSD 11.2, but there are several Intel NIC driver updates included to bridge the gap until 19.1 comes out. The upgrade also includes a tremendous amount of IPv6 improvements and authentication framework consolidation. Please also take note that QinQ is no longer included in this release. Here are the changes against version 18.1.11: improve local account expire cron job to also flush passwords and SSH keys; do not account-lock root user to avoid meddling with cron; only write authorized SSH keys for login-capable users; Diffie-Helman parameter selection - auto, cron-based, RFC 7919; avoid use of expired nsCertType attribute in certificate purpose test; steer SSH shell access via group to separate system-wide admins from SCP-only users; web GUI cipher hardening and optional HSTS use; administration settings now include session timeout and authentication server selection...." A list of changes and known issues in the release candidate can be found in the project's release announcement. Download: OPNsense-18.7.r1-OpenSSL-dvd-amd64.iso.bz2 (261MB, SHA256, signature).

OPNsense is a FreeBSD-based specialist operating system (and a fork of pfSense) designed for firewalls and routers. It is developed by Deciso B.V. in the Netherlands. Some of the features of OPNsense include forward caching proxy, traffic shaping, intrusion detection, two-factor authentication and easy OpenVPN client setup. The project's focus on security brings a number of unique features, such as the option to use LibreSSL instead of OpenSSL (selectable in the GUI) and a custom build based on HardenedBSD. OPNsense also includes an update mechanism that delivers important security updates in a timely fashion.

OPNsense is a FreeBSD-based specialist operating system designed for firewalls and routers. The project has released OPNsense 18.7 which introduces better IPv6 support, improved routing, a pluggable backup framework that features an Nextcloud option, and the ability to boot from a ZFS root volume. "These are the most prominent changes since version 18.1: improved WAN DHCPv6 and SLAAC connectivity and tracking; functional IPv6 Rapid Deployment (6RD) support; improved default route handling and gateway switching; OpenVPN default setup improvements for IPv6 and RADIUS attribute support; Dpinger gateway monitoring integration; password policies for local authentication and coupled TOTP; Monit core integration to eventually replace the legacy notifications; OpenSSH access via group and shell selection instead of privilege; pluggable backup framework with new Nextcloud option; sytem tunables are now also used as loader tunables; unrestricted VLAN usage for e.g. Xen; QinQ interface removal; firmware GUI speedup, improved error parsing and console reboot hint; ZFS on root boot support (installer support is pending, but opnsense-bootstrap works)..." Further details can be found in the release announcement. Download (SHA256): OPNsense-18.7-OpenSSL-dvd-amd64.iso.bz2 (250MB, signature).

OPNsense is a FreeBSD-based specialist operating system (and a fork of pfSense) designed for firewalls and routers. The latest release, OPNsense 18.1, is built on FreeBSD 11.1 and includes PHP version 7.1. The new release also features strict interface binding for OpenSSH connections and a new Realtek network driver, version 1.94. "We humbly present to you the sum of another major iteration of the OPNsense firewall. Over the second half of 2017 well over 500 changes have made it into this release, nicknamed 'Groovy Gecko'. Most notably, the firewall NAT rules have been reworked to be more flexible and usable via plugins, which is going to pave the way for subsequent API works on the core firewall functionality. For more details please find the attached list of changes below. The upgrade track from 17.7 will be available later today. Please be patient. Meltdown and Spectre patches are currently being worked on in FreeBSD, but there is no reliable timeline. We will keep you up to date through the usual channels as more news become available. Hang in there!" Further details can be found in the project's release announcement and press release. Download (SHA256): OPNsense-18.1-OpenSSL-dvd-amd64.iso.bz2 (272MB, signature).

OPNsense is a FreeBSD-based operating system designed for firewalls and routers. The project has released a new release candidate for OPNsense 18.1. "We humbly present to you the sum of another major iteration of the OPNsense firewall. Over the second half of 2017 well over 500 changes have made it into this first release candidate. Most notably, the firewall NAT rules have been reworked to be more flexible and usable via plugins, which is going to pave the way for subsequent API works on the core firewall functionality. For more details please find the attached list of changes below. Meltdown and Spectre patches are currently being worked on in FreeBSD, but there is no reliable timeline. We will keep you up to date through the usual channels as more news become available. Here is the full list of changes against version 17.7.11: disabled AHCI MSI to prevent early mount failures with removable media; use correct crypto library to gather GUI SSL ciphers; added 'save and go back' button to user edit page...." Further details and a list of changes can be found in the project's release announcement. Download (SHA256): OPNsense-18.1.r1-OpenSSL-dvd-amd64.iso.bz2 (258MB, signature)

Robert van Papeveld has announced the release of a new version of OPNsense, a FreeBSD-based operating system for firewalls and routers. The new version, OPNsense 17.7, features SafeStack hardening, many updated language translations and an updated Realtek driver which should improve network stability. "We are writing to you today to announce the final release of version 17.7 'Free Fox', which, over the course of the last 6 months, includes highlights such as SafeStack application hardening, the Realtek re driver for better network stability, a Quagga plugin with broad routing protocol support and the Unbound resolver as the new default. Additionally, translations for Czech, Chinese, Japanese, Portuguese and German have been completed for the first time during this development cycle. Focus in OPNsense has shifted to improving and streamlining its various systems and providing continuous updates, which amounts to over 300 individual changes made since 17.1 so far. The plugin infrastructure is growing as well. And we, last but not least, have been working more closely than ever with HardenedBSD by unifying our ports infrastructure." More information is available in the project's release announcement. Download: OPNsense-17.7-OpenSSL-dvd-amd64.iso.bz2 (223MB, SHA256).

Jos Schellevis has announced the release of a new development snapshot of the OPNsense operating system, a firewall platform based on FreeBSD. The new release candidate for OPNsense 17.7 includes security and stability improvements as well as several updated translations: "We are writing to you today to announce the first release candidate for version 17.7, which, over the course of the last five months, includes highlights such as SafeStack application hardening, the Realtek re driver for network stability, a Quagga plugin with broad routing protocol support and the Unbound resolver as the new default. Additionally, translations for Czech, Chinese, Japanese, Portuguese and German have been completed during this iteration. Focus in OPNsense has shifted to improving and streamlining its various systems and providing continuous updates, which amounts to over 300 individual changes made in 17.1 so far." Further details can be found in the project's release announcement. Download: OPNsense-17.7.r1-OpenSSL-dvd-amd64.iso.bz2 (225MB, SHA256).

The OPNsense operating system is a FreeBSD-based specialist operating system (and a fork of pfSense) designed for firewalls and routers. The project has released a new stable version of the OPNsense operating system, version 17.1. "The OPNsense team is proud to announce the final availability of version 17.1, nicknamed Eclectic Eagle. This major release features FreeBSD 11.0, the SSH remote installer, new languages Italian / Czech / Portuguese, state-of-the-art HardenedBSD security features, PHP 7.0, new plugins for FTP Proxy / Tinc VPN / Let's Encrypt, native PAM authentication against e.g. 2FA (TOTP), as well a rewritten Nano-style card images that adapt to media size to name only a few. We would like to encourage everyone to supervise this major upgrade physically. As such, it cannot be performed from the GUI. Instead, go to the root console menu, choose option 12 and type '17.1' at the prompt. The process will download a full set of updates and reboot multiple. All operating system files and packages will be re-installed as a consequence." Additional information can be found in the project's release announcement. Download: OPNsense-17.1-OpenSSL-cdrom-amd64.iso.bz2 (252MB, SHA256).

The OPNsense project is a FreeBSD-based operating system developed for firewalls and routers. The project has released a new development snapshot which uses FreeBSD 11.0 as its base. "With the best wishes for the holiday season attached we hereby humbly present our 17.1-BETA images and thank everyone for their early input, valid questions and generally keeping us on our toes throughout the past months. The next major release features FreeBSD 11.0, the SSH remote installer, new languages Italian and Czech, state-of-the-art HardenedBSD security features, PHP 7.0, native PAM authentication against e.g. 2FA (TOTP), as well a rewritten Nano-style card images that adapt to the media size to name only a few. These will be the only beta images. They are not suitable for production environments. Release candidate builds will start in January in order to provide production-ready images." Additional information can be found in the project's release announcement. Download: OPNsense-17.1.b-OpenSSL-cdrom-amd64.iso.bz2 (254MB, SHA256).

Jos Schellevis has announced the release of OPNsense 16.7, a FreeBSD-based specialist operating system designed for firewalls and routers: "It is time for the next major iteration in open-source security. After 6 months and 20 minor releases we hereby declare the general availability of OPNsense 16.7, nick-named 'Dancing Dolphin'. The highlights of this major release include: Suricata 3.1.1 with Intel Hyperscan support; NetFlow-based reporting and export; traffic shaping using CoDel / FQ-CoDel; two-factor authentication based on RFC 6238 (TOTP); HTTPS and ICAP support in the proxy server; FreeBSD 10.3 with full integration of HardenedBSD ASLR; UEFI boot and installation modes; substantial updates to our language packs: Japanese, Russian, German, French, Chinese. Attention: an incompatibility in Chrome may prevent the firmware update from running. Try a different browser to upgrade to 16.7 where a workaround has been added to avoid the problem in the future." Read the complete release announcement which includes a list of all the recent changes. Download: OPNsense-16.7-OpenSSL-cdrom-amd64.iso.bz2 (219MB, SHA256), OPNsense-16.7-OpenSSL-cdrom-i386.iso.bz2 (201MB, SHA256).